CVE-2008-6708: Critical severity avaya aura communication manager vulnerability
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or restoring parameters."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6708?
CVE-2008-6708 is classified as a high-severity vulnerability due to its potential to allow remote authenticated administrators to gain root privileges.
How do I fix CVE-2008-6708?
To mitigate CVE-2008-6708, ensure that you apply the latest security patches provided by Avaya for the affected versions of Communication Manager and SIP Enablement Services.
Which versions are affected by CVE-2008-6708?
CVE-2008-6708 affects Avaya Communication Manager versions 3.1.x and 4.x, along with SIP Enablement Services 3.x.
What type of vulnerability is CVE-2008-6708?
CVE-2008-6708 is an unspecified vulnerability in the web management interface of Avaya's software.
Can CVE-2008-6708 be exploited remotely?
Yes, CVE-2008-6708 can be exploited remotely by authenticated administrators, allowing unauthorized access to root privileges.